ba4144b60c3a808e8ca100d774e83c37_JaffaCakes118 | Triage

Sharing

General

Target

ba4144b60c3a808e8ca100d774e83c37_JaffaCakes118
Size

140KB
MD5

ba4144b60c3a808e8ca100d774e83c37
SHA1

4bdad9afd03bba4e4161b733419c5aa94b97e667
SHA256

b811c88f98402ac34acb47b67600951f36f97f18076ba07cd55cccab264ca866
SHA512

e7792269bb0d5d43b1f885b5357a72863c6263f019389f875f7b62e684950576d12cd1fa15bdcb2ba124b55f6e1d8de0d37f45580b9c58e54e2afcdb0339c18d
SSDEEP

1536:N4s8GZ96izQjUho9JdZ582mcocx9wVcl:rtoicEo9JdZ5rmv29qY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba4144b60c3a808e8ca100d774e83c37_JaffaCakes118

Files

ba4144b60c3a808e8ca100d774e83c37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\macpr\Downloads\Ransomware_source_code-master\Ransomware_visual_items\Rasomware2.0\Rasomware2.0\obj\Release\Rasomware2.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ